Gnosis Pay says hackers reached customer data on the legacy system behind its branded debit cards, six weeks before it retires it

Another crypto card provider has lost customer data. Gnosis Pay said on Friday that its monitoring systems detected unauthorized access on November 3 to the legacy system that runs its Gnosis Pay-branded consumer debit cards, and that "certain customer information" was exposed. It says the attackers did not reach customer funds and did not touch the separate enterprise platform that powers its white-label card programs for partner apps.

The company says containment began within two hours of detection. It replaced the compromised security credentials, addressed the vulnerability, stepped up monitoring of card activity and wallets for fraud, and made 3D Secure verification mandatory for all online card payments. Every affected customer has been emailed with the exact data taken from their account, and Gnosis Pay says it has told its partners and is in contact with its card issuer and the relevant data protection authorities. The company did not list the data types in its public post. The legacy system was already scheduled to be fully retired on December 20, and the extra security measures stay in place until then.

Gnosis Pay is warning customers to treat unexpected emails, texts, calls or letters about their card with suspicion even if they contain real details, and says it will never ask for seed phrases, private keys, PINs or full card numbers, or ask anyone to move funds by email or phone.

The Block places the breach in a run of incidents at crypto card businesses: an attacker accessed an internal dashboard used to manage Based's Visa card program on October 5, exposing some customer data, and a vulnerability at Rain, which provides card infrastructure on Solana, allowed unauthorized withdrawals from the card balances of Tria and Avici users in August.